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Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1 .704(b). 

Status 

I) S Responsive to communication(s) filed on 9/25/2006 . 

2a)n This action is FINAL. 2b)l3 Tiiis action is non-final. 

3) n Since this application is in condition for allowance except for fomnal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 

Disposition of Claims 

4) [3 Claim(s) 1-26 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) 0 Claim(s) is/are allowed. 

6) S Claim(s) 1-26 is/are rejected. 
?)□ Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) n The specification is objected to by the Examiner. 

1 Q)M The drawing(s) filed on 10/30/2000 is/are: a)S accepted or b)n objected to by the Examiner. 
Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

II) 0 The oath or declaration is objected to by the Examiner. Note the attached Office Action orfomri PTO-152. 

Priority under 35 U.S.C. § 119 

1 2)n Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 1 9(a)-(d) or (f). 
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1 .□ Certified copies of the priority documents have been received. 

2. n Certified copies of the priority documents have been received in Application No. . 

3. n Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 

Continued Examination Under 37 CFR 1.114 
A request for continued examination under 37 CFR 1.114, including the fee set forth in 

37 CFR 1 .17(e), was filed in this application after final rejection. Since this appUcation is 

eligible for continued examination under 37 CFR 1.114, and the fee set forth in 37 CFR 1 . 1 7(e) 

has been timely paid, the finality of the previous Office action has been withdrawn pursuant to 

37 CFR 1.114. Apphcant's submission filed on 9/25/2006 has been entered. 

Response to Amendment 
Applicant's arguments/amendments with respect to amended claims 1 & 15, previously 

presented claims 2-14 & 16-22, and newly presented claims 23-26 filed 8/24/2006 have been 

fijlly considered and therefore the claims are rejected under new grounds. 

Claim Rejections - 35 USC §112 
The following is a quotation of the second paragraph of 35 U.S. C. 1 12: 

The specification shall conclude with one or more claims particularly pointing out and distinctly claiming the 
subject matter which the applicant regards as his invention. 

Claims 1-26 are rejected under 35 U.S.C. 1 12, second paragraph, as being indefinite for 
failing to particularly point out and distinctly claim the subject matter which applicant regards as 
the invention. 
As per claims 1 and 12: 

Regarding claims 1 and 12, the phrase "certain results" renders the claun indefinite 
because it is unclear what the term "certain" encompasses and one of ordinary skill in the art 
would not be reasonably apprised of the scope of the invention. 
As per claims 2-11 and 13-26: 

These claims are rejected by virtue of their dependency. 
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Claim Rejections - 35 USC § 103 

I. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

II. Claims 1-7, 9, 1 1-18, 20, and 22-26 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Chen et al. United States Patent No. 5,960,170 and further in view of Hill et 
al., United States Patent No. 6,088,804. 

As per claims 1 and 12: 

Chen et al. substantially teach a system/method comprising: a plurality of client users 
having potentially infected client end-user computers, said end-user computers being distributed 
over said distributed computer network (col. 7, hnes 6-12); at least one anti-virus scanning server 
accessible via the distributed computer network, said scanning server including an anti-virus 
scanning program, whereby the client users contact the scanning server to facilitate virus 
scanning of the cUent end-user computers by downloading said anti-virus scanning program (col 
7, lines 21-35), a scan log which is sent back over said distributed computer network from each 
client user detailing results of the virus scanning on each client end-user computer by said 
antivirus scanning program (col. 7, lines 33-61); a virus-tracking server for receiving the scan log 
information from said cUent end-user computers (col. 24, lines 10-20); a database server 
associated with the virus-checking server for processing the scan log information into virus- 
tracking information (col. 7, Unes 39-47); and a tracking user from the virus tracking server (col. 
15, lines 63-67). 
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Not explicitly disclosed is wherein the scan log information is received by the virus- 
tracking server in real time and at least one virus-tracking display mode accessible by a tracking 
user, the display mode providing real-time updates of said virus-tracking information pertaining 
to the scan logs. However, Hill et al. teach displaying in real-time, to an administrator of some 
type, graphs of virus detection incidents in various sub-regions in order to keep track of potential 
viruses that may spread and damage other systems if no action is taken (col. 3, lines 36-41). 
Therefore, it would have been obvious to a person in the art at the time the invention was made 
to modify the system disclosed in Chen et al. to have a displaying mechanism that is updated in 
real-time in order to ensure early detection of possible viral threats. This modification would 
have been obvious because a person having ordinary skill in the art, at the time the invention was 
made, would have been motivated to do so since Hill et al. suggest that displaying the possible 
threats in a manner that allows quick interpretation of the situation is imperative in minimizing 
the impact that the virus may have on the network as a whole in col. 7, lines 3-17 and col. 9, 
lines 17-19. 

As per claims 2 and 13 : 

Chen et al. and Hill et al. substantially teach the system/method of claims 1 and 12. 
Furthermore, Hill et al. teach wherein the tracking user can configure the display modes to show 
the virus-tracking information in association with user-selected geographic maps of where the 
viruses are occurring (col. 3, lines 36-41). 
As per claims 3 and 14: 

Chen et al. and Hill et al. substantially teach the system/method of claims 1 and 12. 
Furthermore, Hill et al, teach wherein display modes include a plurality of web pages with user 
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selectable menus to configure the virus-tracking display on the pages (col. 9, lines 20-25). 
As per claims 4. and 15: 

Chen et al. and Hill et al. substantially teach the system/method of claims 1 and 12. 
Furthermore, Chen et al. teach a scan log contains no information relating to the direct 
identification of the chent user (col. 10, lines 8-17) 
As per claims 5 and 16: 

Chen et al, and Hill et al. substantially teach the system/method of claims 1 and 12. 
Furthermore, Hill et al. teach that the scan log includes the name of the virus, the frequency of its 
occurrence, and the geographic location of the infected computer (col. 8, lines 23-35). 
As per claims 6 and 17: 

Chen et al. and Hill et al. substantially teach the system/method of claims 1 and 12. 
Furthermore, Chen et al. teach a servlet program on the virus-tracking server is used to receive 
the scan log information from the at least one anti- virus scanning server (col. 10, lines 65-67). 
As per claims 7 and 18: 

Chen et al. and Hill et al. substantially teach the system/method of claims 1 and 12. 
Furthermore, Chen et al. teach a polling program is used to regularly retrieve virus-tracking 
information from the database server and store it in a data object (col. 10, lines 18-34). 
As per claims 9 and 20: 

Chen et al. and Hill et al. substantially teach the system/method of claims 1 and 12. 
Furthermore, Hill et al. teach a Java applet running on tracking user browser is used to display a 
real-time virus-tracing map (col. 6, lines 45-67). 
As per claims 1 1 and 22: 
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Chen et al. and Hill et al. substantially teach the system/method of claims 1 and 12. 
Furthermore, Chen et al. teach the system wherein the distributed computer network includes the 
Internet, wherein said scan log from each scanned client computer is sent back over the Internet 
to be received by said virus tracking server (col. 10, Unes 1-17 and lines 49-51). Yet further, Hill 
et al. teach wherein said virus tracking display mode is accessible over the Internet by said 
tracking user (col. 8, lines 7-16). 
As per claims 23 and 25: 

Chen et al. and Hill et al. substantially teach the system/method of claims 1 and 12. 
Furthermore, Hill et al. teach wherein said virus-tracking information identifies concentrations of 
a computer virus at said chent end-user computer locations (col. 8, lines 23-35). 
As per claims 24 and 26: 

Chen et al. and Hill et al. substantially teach the system/method of claims 1 and 12. 
Furthermore, Chen et al. teach wherein said scan log information is processed by aggregating 
said scan logs from each client end-user computer and then synthesizing said virus tracking 
information (col. 7, lines 33-61) 

III. Claims 8, 10, 19, and 21 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Chenet al., United States Patent No. 5,960,170 and Hill etal., United States Patent No. 
6,088,804 as appUed to claims 1, 7, 12, and 18 above, and further in view of Trcka et al., United 
States Patent No. 6,453,345 
As per claims 8 and 19: 

Chen et al. and Hill et al. substantially teach the system/methdd of claims 7 and 18. Not 
explicitly disclosed is a common gateway interface program used to retrieve the data object for 
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display by the tracking user. Trcka et al. teach traffic capture components, which run 
continuously in the background, to passively generate a data stream that represents the traffic 
present on the network (col, 10, lines 60-66). It would have been obvious to a person having 
ordinary skill in the art at the time of the invention was made to modify Chen et al.'s 
collaborative server by reporting and logging information about viruses tracking for the client 
user in order that the cUent may utilize the information to deploy anti- virus programs. 
As per claims 10 and 21 : 

Chen et al. and Hill et al. substantially teach the system/method of claims 1 and 12. Not 
explicitly disclosed is wherein the client user is also the tracking user. Trcka et al. teach from the 
screens, the user can specify such parameters as start time/date, end time/date, the types of events 
of interest. The user can specify search criteria and specific fields to be searched and can specify 
an output type of the display screen, the printer, or the file (col. 20, lines 5-12). It would have 
been obvious to a person having ordinary skill in the art at the time of the invention was made to 
modify Chen et al.'s collaborative server by allowing the client user to also be the user, thus 
allowing individuals to set-up web sights and protect their computer from viruses by use of the 
allowed operations. 

"^References Cited, Not Used 

The prior art, US Patent No. 6,721,721, made of record and not reUed upon is considered 
pertinent to appUcant's disclosure. US Patent No. 6,721,721 has been cited because it is relevant 
to the displaying/virus tracking portions of the claimed invention. 
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Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Nadia Khoshnoodi whose telephone number is (571) 272-3825. 
The examiner can normally be reached on M-F: 8:00-4:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Emmanuel Moise can be reached on (571) 272-3865. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an appUcation may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be- obtained from either Private PAIR or PubUc PAIR. Status information for unpublished 
appUcations is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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